Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · OpenShift 4 openshift:4.7::el7 | cri-o | 0:1.20.2-6.rhaos4.7.gitf1d5201.el7 |
| Red Hat · OpenShift 4 openshift:4.7::el7 | cri-o-debuginfo | 0:1.20.2-6.rhaos4.7.gitf1d5201.el7 |
| Red Hat · OpenShift 4 openshift:4.7::el7 | openshift | 0:4.7.0-202104090228.p0.git.97111.77863f8.el7 |
| Red Hat · OpenShift 4 openshift:4.7::el7 | openshift-hyperkube | 0:4.7.0-202104090228.p0.git.97111.77863f8.el7 |
| Red Hat · OpenShift 4 openshift:4.7::el8 | cri-o | 0:1.20.2-6.rhaos4.7.gitf1d5201.el8 |
| Red Hat · OpenShift 4 openshift:4.7::el8 | cri-o-debuginfo | 0:1.20.2-6.rhaos4.7.gitf1d5201.el8 |
| Red Hat · OpenShift 4 openshift:4.7::el8 | cri-o-debugsource | 0:1.20.2-6.rhaos4.7.gitf1d5201.el8 |
| Red Hat · OpenShift 4 openshift:4.7::el8 | openshift | 0:4.7.0-202104090228.p0.git.97111.77863f8.el8 |
| Red Hat · OpenShift 4 openshift:4.7::el8 | openshift-hyperkube | 0:4.7.0-202104090228.p0.git.97111.77863f8.el8 |
Vulnerabilities 1
-
Medium 6.5
Improper Locking in github.com/containers/storage
A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image is processed, each layer is unpacked using `tar`. If one of those layers is not a valid `tar` archive this causes an error leading to an un…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1939485
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1948423
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1150.json
-
report
https://access.redhat.com/security/cve/CVE-2021-20291
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-20291
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-20291
-
article
https://unit42.paloaltonetworks.com/cve-2021-20291/